VendorsSolarwindswebhelpdesk12.7.0
Vulnerabilities

Solarwinds Web Help Desk (WHD) 12.7.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2019-16959
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket.
Published 2020-12-21 · Modified
6.5EPSS 0.017
CVE-2019-16955
SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request.
Published 2020-12-18 · Modified
5.4EPSS 0.017
CVE-2019-16957
SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account.
Published 2020-12-18 · Modified
5.4EPSS 0.015